Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa
File: 2040fb79-7dc8-3434-ae0f-4850948ea219.roa (raw, json)
Hash identifier: cMyGkcJOUY56a3SgSE+iRBdsZ3nBc68D6pGd3ZXhiMY=
Subject key identifier: 0D:26:3E:73:E8:9E:7C:F4:12:2A:F7:B7:F8:71:E6:E2:2B:F3:A2:63
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584800AFC5613333B1402B98D1A0
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 8069
IP address blocks: 20.153.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c5:61:33:33:b1:40:2b:98:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=6e3863f1-a333-45af-8ba3-16c7b3dbfb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:91:e7:8d:7e:4f:d0:96:9c:df:99:5f:56:
15:57:7d:77:0a:47:13:3b:3d:6e:c3:96:d9:75:e5:
4b:8f:86:01:e7:c8:82:8d:a9:91:86:23:57:aa:32:
da:d5:11:f5:e5:93:25:88:6a:a2:00:da:43:8f:98:
a1:da:00:ed:63:f9:d1:c9:d6:d7:1f:9c:99:28:3d:
43:2a:af:54:98:b5:7e:b4:c1:8b:13:5a:48:76:43:
eb:33:65:82:b0:62:18:8f:89:50:01:98:d1:09:aa:
0e:d8:59:65:13:ed:f4:dc:42:39:69:d4:72:0d:dc:
cb:1b:4f:6f:6a:ab:27:29:6a:98:d5:62:d0:a0:b2:
8d:ba:a5:9c:46:dc:ef:e5:ae:e9:8c:51:35:b9:1f:
e0:93:bc:c2:c7:09:2e:94:1b:6a:71:57:92:69:16:
10:b4:f2:c7:df:a3:3c:02:d5:7b:3a:ec:58:53:71:
8e:8b:39:67:1c:b2:65:9d:f7:3d:e6:12:7b:7d:81:
7f:f6:5d:d3:f8:7f:a0:d9:10:ce:cd:7d:dc:b5:39:
cd:0a:96:70:03:84:07:70:0e:50:f7:94:83:14:a7:
ff:8b:73:4f:7b:d7:ea:d7:f5:10:3a:23:fb:c9:04:
0e:bd:87:5a:b2:7c:67:cb:60:9b:db:41:12:1e:aa:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:26:3E:73:E8:9E:7C:F4:12:2A:F7:B7:F8:71:E6:E2:2B:F3:A2:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/2040fb79-7dc8-3434-ae0f-4850948ea219.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.153.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:1c:f6:ef:a8:77:35:47:3f:9a:8a:69:fd:68:06:36:a7:0b:
94:10:f1:79:47:26:77:f6:b4:c5:04:c1:1e:95:f2:c7:e3:67:
5a:d9:c8:f7:a1:84:d6:b4:d8:10:1b:75:59:89:28:e1:0e:10:
e2:f2:8e:c1:87:3a:71:72:1c:23:65:26:ae:72:cd:f1:83:69:
bb:11:2b:ee:17:8a:3f:f5:61:db:46:51:24:07:f7:80:8c:78:
51:bc:40:70:24:af:fd:e4:fe:cf:bd:0a:07:ae:f4:7a:37:a2:
e3:ed:06:bf:e1:aa:ad:77:00:82:d4:89:28:fb:8e:78:eb:55:
9b:4a:f7:b0:37:10:1e:7c:b7:1a:86:88:b4:13:37:38:75:bb:
8b:48:03:ea:ed:99:4e:07:dc:b1:ee:b1:5f:59:a3:db:34:3a:
06:37:b2:62:52:b6:00:2c:d7:61:c4:b0:fa:bc:f0:44:b6:cc:
85:c8:8c:9d:9d:94:f6:18:cb:37:02:eb:df:2e:a2:f6:0c:b0:
89:a7:b1:e9:6e:b2:d1:71:16:86:08:e8:be:3b:5c:13:68:1b:
cc:28:a4:4a:cc:a9:85:e8:39:2b:05:a3:a0:1c:a6:6e:e0:19:
33:30:12:16:09:c6:0a:f6:bd:45:55:5b:c8:c2:4b:27:da:b0:
90:48:b2:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgAr8VhMzOxQCuY0aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI0MTEyNjAyMDAyNloXDTI1MDIyNDAyMDAyNlowLzEtMCsGA1UEAxMk
NmUzODYzZjEtYTMzMy00NWFmLThiYTMtMTZjN2IzZGJmYjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSyR541+T9CWnN+ZX1YVV313CkcTOz1uw5bZ
deVLj4YB58iCjamRhiNXqjLa1RH15ZMliGqiANpDj5ih2gDtY/nRydbXH5yZKD1D
Kq9UmLV+tMGLE1pIdkPrM2WCsGIYj4lQAZjRCaoO2FllE+303EI5adRyDdzLG09v
aqsnKWqY1WLQoLKNuqWcRtzv5a7pjFE1uR/gk7zCxwkulBtqcVeSaRYQtPLH36M8
AtV7OuxYU3GOizlnHLJlnfc95hJ7fYF/9l3T+H+g2RDOzX3ctTnNCpZwA4QHcA5Q
95SDFKf/i3NPe9fq1/UQOiP7yQQOvYdasnxny2Cb20ESHqoI9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0mPnPonnz0Eir3t/hx5uIr86JjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvMjA0MGZiNzktN2RjOC0z
NDM0LWFlMGYtNDg1MDk0OGVhMjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJkMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIc9u+odzVHP5qKaf1oBjanC5QQ8XlHJnf2tMUEwR6V8sfjZ1rZyPeh
hNa02BAbdVmJKOEOEOLyjsGHOnFyHCNlJq5yzfGDabsRK+4Xij/1YdtGUSQH94CM
eFG8QHAkr/3k/s+9Cgeu9Ho3ouPtBr/hqq13AILUiSj7jnjrVZtK97A3EB58txqG
iLQTNzh1u4tIA+rtmU4H3LHusV9Zo9s0OgY3smJStgAs12HEsPq88ES2zIXIjJ2d
lPYYyzcC698uovYMsImnselustFxFoYI6L47XBNoG8wopErMqYXoOSsFo6Acpm7g
GTMwEhYJxgr2vUVVW8jCSyfasJBIsio=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:38 2025 by rpki-client